Microsoft has published CVE-2026-40374 as a Microsoft Power Automate Desktop information disclosure vulnerability in its Security Update Guide, identifying the issue as a confirmed flaw in the desktop automation product rather than a speculative or third-party-only report. The sparse advisory...